Solution
Please Install the Updated Packages.
Insight
Ryan Smith-Roberts discovered that Python incorrectly handled buffer sizes when using the socket.recvfrom_into() function. An attacker could possibly use this issue to cause Python to crash, resulting in denial of service, or possibly execute arbitrary code.
Affected
python2.7 on Ubuntu 13.10 ,
Ubuntu 12.10 ,
Ubuntu 12.04 LTS ,
Ubuntu 10.04 LTS
Severity
Classification
-
CVE CVE-2014-1912 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Ubuntu Update for emacs23 USN-1586-1
- Ubuntu Update for apturl, Epiphany, gecko-sharp, gnome-python-extras, liferea, rhythmbox, totem, ubufox, yelp update USN-930-2
- Ubuntu Update for cups, cupsys vulnerability USN-1012-1
- Ubuntu Update for eglibc, glibc vulnerability USN-1009-2
- Ubuntu Update for enigmail regression USN-469-2